I believe most of them are in the IMAIL\Spool directory. I am running a fresh scan to verify that.
Jim Rooth -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Friday, June 14, 2002 2:26 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Virus removal >Declude and F-Prot are doing a great job...when I don't mess with them! >Question though is when I scan the server I find something like 138 >instances of virus (viri) on the server in archived locations. I wonder >how one goes about removing them? I have been literally removing the >users and reinstalling them and that way seems to help. Got to be a >better way though?? What archived locations? Do you mean FTP files? Backups of the \IMail\spool\virus directory? For .mbx files, someone on the IMail Forum recently mentioned a program that will go through all the .mbx files and rename ".exe" to ".exb", so that if there were any viruses in the .mbx files, they could not be run automatically (although this would need to be repeated for any extensions that the virus used). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.371 / Virus Database: 206 - Release Date: 6/13/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.371 / Virus Database: 206 - Release Date: 6/13/2002 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
